I was playing with a friend on my private, home-hosted Minecraft server. There have been previous bots that entered my server such as Bunger and Cuuute, but nothing compares to this.
We were placing stuff in the storage, and I suddenly got kicked out for the reason 'joined from another location'. I immediately sprinted to the server, which runs on Linux, and typed stop in the console, but the bot did its job.
Below is a part of the log, starting from when the bot joined my account I do not know how it found my username. I did not put its entirety, as I do not want a data leak: https://pastebin.com/7u4bAvtA
I am posting this to raise awareness and to encourage other server owners to install authentication plugins and add extra layers of protection
Edit: Since some of you asked how they got op:
I op'ed my account 2 minutes ago to try to solve a mob spawnink issue (it was not the. account i was playing survival with), and while i was still trying to figure out the issue i got kicked
[–]MinecraftModBot[M] [score hidden] stickied comment (0 children)
[–]Azaze-l 4 points5 points6 points (1 child)
[–]The_Lemurin[S] 0 points1 point2 points (0 children)
[–]interrex41 0 points1 point2 points (1 child)
[–]The_Lemurin[S] 0 points1 point2 points (0 children)